Executive brief
Authelia vulnerable to an authentication bypassed with malformed request URI on nginx
Affected products
- Go github.com/authelia/authelia/v4
Junglewise Threat Intelligence
CVE-2021-32637: Authelia vulnerable to an authentication bypassed with malformed request URI on nginx
CVE-2021-32637 · Severity: low · CVSS 3.1 · Published 2021-12-20
Technologies: github.com/authelia/authelia/v4 (Go). Vendors: Go.
Related threats
- Authelia incorrect authorization via improper domain canonicalization
- Authelia improper username canonicalization in Basic Auth
- GO-2026-4818 - Authelia: Improper Neutralization of Input During Web Page Generation Leads to Potential Cross-site Scripting in github.com/authelia/autheli
- GO-2025-3468 - Authelia applies regulation separately to Username-based logins to Email-based logins in github.com/authelia/authelia
- GO-2024-2744 - Access control change may take longer than expected in github.com/authelia/authelia/v4